Security Advisory

CVE-2016-9563

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-11-23 02:00:00

Last updated 2025-10-21 23:55:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909.

← Browse all CVEs View on cve.org ↗